Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2659▼ 692 respecto a la semana anterior
Críticas / altas1261▼ 300 respecto a la semana anterior
Nueva explotación activa (KEV)3▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)250▼ 252 respecto a la semana anterior
697 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (6.7) | 0.72% | — | Cisco Enterprise NFV Infrastructure Software | 8/8/2019 | 24/8/2026 | A vulnerability in the CLI of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, local attacker to overwrite or read arbitrary files. The attacker would need valid administrator privilege-level credentials. This vulnerability is due to improper input validation of CLI command arguments.… | |
| Modificada | Media (6.5) | 1.4% | — | Cisco Enterprise NFV Infrastructure Software | 8/8/2019 | 24/8/2026 | A vulnerability in the web-based management interface of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an unauthenticated, remote attacker to bypass authentication and get limited access to the web-based management interface. The vulnerability is due to an incorrect implementation of authentication… | |
| Modificada | Crítica (9.8) | 2.3% | — | Cisco Enterprise NFV Infrastructure Software | 7/8/2019 | 24/8/2026 | A vulnerability in the Virtual Network Computing (VNC) console implementation of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an unauthenticated, remote attacker to access the VNC console session of an administrative user on an affected device. The vulnerability is due to an insufficient… | |
| Modificada | Alta (7.5) | 11% | 💥 PoC | Fasterxml Jackson-databindDebian LinuxFedoraproject FedoraApache Drill+14 | 30/7/2019 | 17/6/2026 | A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9.2. This occurs when Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the logback jar in the classpath. | |
| Modificada | Crítica (9.8) | 8.1% | — | Fasterxml Jackson-databindDebian LinuxNetapp Active IQ Unified ManagerNetapp Oncommand Workflow Automation+20 | 29/7/2019 | 17/6/2026 | SubTypeValidator.java in FasterXML jackson-databind before 2.9.9.2 mishandles default typing when ehcache is used (because of net.sf.ehcache.transaction.manager.DefaultTransactionManagerLookup), leading to remote code execution. | |
| Modificada | Crítica (9.8) | 16% | 💥 PoC | Softwareag QuartzOracle Apache Batik MapviewerOracle Banking Enterprise OriginationsOracle Banking Enterprise Product Manufacturing+27 | 26/7/2019 | 17/6/2026 | initDocumentParser in xml/XMLSchedulingDataProcessor.java in Terracotta Quartz Scheduler through 2.3.0 allows XXE attacks via a job description. | |
| Modificada | Media (5.4) | 0.68% | — | Oracle Financial Services Analytical Applications Infrastructure | 23/7/2019 | 17/6/2026 | Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 8.0.5-8.0.8. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to… | |
| Modificada | Alta (8.8) | 3.5% | — | LibpngOracle Hyperion Infrastructure TechnologyOracle Mysql WorkbenchNetapp Active IQ Unified Manager+1 | 10/7/2019 | 17/6/2026 | An issue has been found in third-party PNM decoding associated with libpng 1.6.35. It is a stack-based buffer overflow in the function get_token in pnm2png.c in pnm2png. | |
| Modificada | Alta (7.2) | 3.5% | — | Cisco Enterprise NFV Infrastructure Software | 6/7/2019 | 17/6/2026 | A vulnerability in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker with administrator privileges to overwrite or read arbitrary files on the underlying operating system (OS) of an affected device. The vulnerability is due to improper input validation in NFVIS… | |
| Modificada | Alta (7.8) | 0.63% | — | Cisco Enterprise NFV Infrastructure Software | 6/7/2019 | 17/6/2026 | A vulnerability in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system (OS) of an affected device as root. The vulnerability is due to insufficient input validation of a configuration file that is accessible… | |
| Modificada | Media (6.5) | 0.63% | — | Cisco Application Policy Infrastructure Controller | 4/7/2019 | 17/6/2026 | A vulnerability in the fabric infrastructure VLAN connection establishment of the Cisco Nexus 9000 Series Application Centric Infrastructure (ACI) Mode Switch Software could allow an unauthenticated, adjacent attacker to bypass security validations and connect an unauthorized server to the infrastructure VLAN. The… | |
| Modificada | Alta (7.2) | 2.8% | — | Cisco Application Policy Infrastructure Controller | 4/7/2019 | 17/6/2026 | A vulnerability in the REST API for software device management in Cisco Application Policy Infrastructure Controller (APIC) Software could allow an authenticated, remote attacker to escalate privileges to root on an affected device. The vulnerability is due to incomplete validation and error checking for the file path… | |
| Modificada | Media (6.5) | 1.3% | — | Cisco Prime Infrastructure | 20/6/2019 | 17/6/2026 | A vulnerability in the Virtual Domain system of Cisco Prime Infrastructure (PI) could allow an authenticated, remote attacker to change the virtual domain configuration, which could lead to privilege escalation. The vulnerability is due to improper validation of API requests. An attacker could exploit this… | |
| Modificada | Crítica (9.8) | 89% | 💥 Exploit | Oracle Communications Diameter Signaling RouterOracle Communications Network IntegrityOracle Hyperion Infrastructure TechnologyOracle Identity Manager+5 | 19/6/2019 | 17/6/2026 | Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic… | |
| Modificada | Alta (8.1) | 1.9% | — | Cisco Evolved Programmable Network ManagerCisco Network Level ServiceCisco Prime Infrastructure | 16/5/2019 | 17/6/2026 | A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Cisco Evolved Programmable Network (EPN) Manager could allow an authenticated, remote attacker to execute arbitrary SQL queries. This vulnerability exist because the software improperly validates user-supplied input in SQL… | |
| Modificada | Alta (8.1) | 1.9% | — | Cisco Evolved Programmable Network ManagerCisco Prime Infrastructure | 16/5/2019 | 17/6/2026 | A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Cisco Evolved Programmable Network (EPN) Manager could allow an authenticated, remote attacker to execute arbitrary SQL queries. This vulnerability exist because the software improperly validates user-supplied input in SQL… | |
| Modificada | Alta (7.2) | 4.4% | — | Cisco Evolved Programmable Network ManagerCisco Network Level ServiceCisco Prime Infrastructure | 16/5/2019 | 17/6/2026 | A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Cisco Evolved Programmable Network (EPN) Manager could allow an authenticated, remote attacker to execute code with root-level privileges on the underlying operating system. This vulnerability exist because the software… | |
| Modificada | Alta (7.2) | 4.4% | — | Cisco Evolved Programmable Network ManagerCisco Prime Infrastructure | 16/5/2019 | 17/6/2026 | A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Cisco Evolved Programmable Network (EPN) Manager could allow an authenticated, remote attacker to execute code with root-level privileges on the underlying operating system. This vulnerability exist because the software… | |
| Modificada | Crítica (9.8) | 98% | 💥 Exploit | Cisco Evolved Programmable Network ManagerCisco Network Level ServiceCisco Prime Infrastructure | 16/5/2019 | 17/6/2026 | A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Cisco Evolved Programmable Network (EPN) Manager could allow an authenticated, remote attacker to execute code with root-level privileges on the underlying operating system. This vulnerability exist because the software… | |
| Modificada | Media (6.5) | 14% | — | Cisco Evolved Programmable Network ManagerCisco Prime Infrastructure | 16/5/2019 | 17/6/2026 | A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network (EPN) Manager software could allow an authenticated, remote attacker to download and view files within the application that should be restricted. This vulnerability is due to improper sanitization… | |
| Modificada | Media (6.5) | 14% | — | Cisco Evolved Programmable Network ManagerCisco Prime Infrastructure | 16/5/2019 | 17/6/2026 | A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network (EPN) Manager software could allow an authenticated, remote attacker to download and view files within the application that should be restricted. This vulnerability is due to improper sanitization… | |
| Modificada | Media (6.5) | 14% | — | Cisco Evolved Programmable Network ManagerCisco Prime Infrastructure | 16/5/2019 | 17/6/2026 | A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network (EPN) Manager software could allow an authenticated, remote attacker to download and view files within the application that should be restricted. This vulnerability is due to improper sanitization… | |
| Modificada | Media (5.4) | 0.81% | — | Cisco Application Policy Infrastructure Controller | 3/5/2019 | 17/6/2026 | A vulnerability in the web-based management interface of Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The vulnerability is due to… | |
| Modificada | Media (6.7) | 0.32% | — | Cisco Nexus 9000 Series Application Centric Infrastructure | 3/5/2019 | 17/6/2026 | A vulnerability in the filesystem management for the Cisco Nexus 9000 Series Application Centric Infrastructure (ACI) Mode Switch Software could allow an authenticated, local attacker with administrator rights to gain elevated privileges as the root user on an affected device. The vulnerability is due to overly… | |
| Modificada | Media (5.3) | 1.2% | — | Cisco Application Policy Infrastructure Controller | 3/5/2019 | 17/6/2026 | A vulnerability in the web-based management interface of Cisco Application Policy Infrastructure Controller (APIC) Software could allow an unauthenticated, remote attacker to access sensitive system usage information. The vulnerability is due to a lack of proper data protection mechanisms for certain components in the… |